Does the DROWN attack enablesenable breaking strong RSA keys (e.g., the 2048-bit) RSA keys (the key itself) or enablesenable breaking the plaintext (i.e., pre-master key) that is encrypted with a 2048-bit (or any strong) RSA, if the key is shared with SSLv2 server?